后门攻击论文趋势 2023–2026
触发器与检测
统计范围：NeurIPS、ICLR、ICML、CVPR 四个会议，2023–2026 年，共 381 篇被归入该主题的论文。
主要结论
- 后门攻击论文从 2023 年的 73 篇增长到 2026 年的 111 篇，三年间扩大到约 1.5 倍。
- NeurIPS 是发后门攻击论文最多的会议，2023–2026 年共 124 篇，占四个会议总量的 33%。
- 交叉方向里涨得最快的是对齐与安全：同时属于两个主题的论文从 2023 年的 0 篇增至 2026 年的 16 篇。
- 在「安全与可信」的 5 个主题里，它的 2026 年论文数排第 2；同组增长最快的水印是 9.3 倍，后门攻击是 1.5 倍。
各会议论文数
按年份和会议统计
| 年份 | NeurIPS | ICLR | ICML | CVPR | 合计 |
|---|---|---|---|---|---|
| 2023 | 21 | 15 | 11 | 26 | 73 |
| 2024 | 36 | 27 | 24 | 18 | 105 |
| 2025 | 31 | 25 | 17 | 19 | 92 |
| 2026 | 36 | 20 | 36 | 19 | 111 |
代表论文
按年份和会议均匀挑选，方便快速看到每一届的样貌
- NeurIPS 2026A Theoretical Analysis of Backdoor Learning as Simplicity-Biased Optimization Dynamics
- ICML 2026Coupled Trigger Optimization and Vulnerable Parameter Alignment for Persistent Backdoor Attacks on Federated Learning
- ICLR 2026Defending against Backdoor Attacks via Module Switching
- CVPR 2026Eliminate Distance Differences Induced by Backdoor Attacks Layer-Selective Training and
- NeurIPS 2025A Set of Generalized Components to Achieve Effective Poison-only Clean-label Backdoor Attacks with Collaborative Sample Selection and Triggers
- ICML 2025A Closer Look at Backdoor Attacks on CLIP
- ICLR 2025Activation Gradient based Poisoned Sample Detection Against Backdoor Attacks
- CVPR 2025BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models
- NeurIPS 2024Reproducibility Study on Adversarial Attacks Against Robust Transformer Trackers
- ICML 2024Better Safe than Sorry: Pre-training CLIP against Targeted Data Poisoning and Backdoor Attacks
- ICLR 2024Adversarial Feature Map Pruning for Backdoor
- CVPR 2024Data Poisoning based Backdoor Attacks to Contrastive Learning
- NeurIPS 2023A Unified Detection Framework for Inference-Stage Backdoor Defenses
- ICML 2023Data Poisoning Attacks Against Multimodal Encoders
- ICLR 2023Adversarial Attacks on Adversarial Bandits
- CVPR 2023Architectural Backdoors in Neural Networks
- NeurIPS 2026AI Models Can Provably Hide Arbitrary Capabilities
- ICML 2026DF-LoGiT: Data-Free Logic-Gated Backdoor Attacks in Vision Transformers
- ICLR 2026Don't Shift the Trigger: Robust Gradient Ascent for Backdoor Unlearning
- CVPR 2026Logit-Margin Repulsion for Backdoor Defense
全部后门攻击论文
共 31 篇，第 1 / 1 页
- NeurIPS 2025A Set of Generalized Components to Achieve Effective Poison-only Clean-label Backdoor Attacks with Collaborative Sample Selection and Triggers
- NeurIPS 2025Adversarial Paraphrasing: A Universal Attack for Humanizing AI-Generated Text
- NeurIPS 2025Attack by Yourself: Effective and Unnoticeable Multi-Category Graph Backdoor Attacks with Subgraph Triggers Pool
- NeurIPS 2025Backdoor Mitigation via Invertible Pruning Masks
- NeurIPS 2025BackdoorDM: A Comprehensive Benchmark for Backdoor Learning on Diffusion Model
- NeurIPS 2025BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models
- NeurIPS 2025BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization
- NeurIPS 2025Competitive Advantage Attacks to Decentralized Federated Learning
- NeurIPS 2025Defending Multimodal Backdoored Models by Repulsive Visual Prompt Tuning
- NeurIPS 2025Efficient Federated Learning against Byzantine Attacks and Data Heterogeneity via Aggregating Normalized Gradients
- NeurIPS 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks
- NeurIPS 2025FedRACE: A Hierarchical and Statistical Framework for Robust Federated Learning
- NeurIPS 2025From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularization
- NeurIPS 2025ICLScan: Detecting Backdoors in Black-Box Large Language Models via Targeted In-context Illumination
- NeurIPS 2025Latency NMS Attacks: Is It Real Life or Is It Just Fantasy?
- NeurIPS 2025Lie Detector: Unified Backdoor Detection via Cross-Examination Framework
- NeurIPS 2025LoSplit: Loss-Guided Dynamic Split for Training-Time Defense Against Graph Backdoor Attacks
- NeurIPS 2025MARS: A Malignity-Aware Backdoor Defense in Federated Learning
- NeurIPS 2025Provable Watermarking for Data Poisoning Attacks
- NeurIPS 2025RepGuard: Adaptive Feature Decoupling for Robust Backdoor Defense in Large Language Models
- NeurIPS 2025SilentStriker: Toward Stealthy Bit-Flip Attacks on Large Language Models
- NeurIPS 2025SNEAKDOOR: Stealthy Backdoor Attacks against Distribution Matching-based Dataset Condensation
- NeurIPS 2025Stealthy Yet Effective: Distribution-Preserving Backdoor Attacks on Graph Classification
- NeurIPS 2025Taught Well Learned Ill: Towards Distillation-conditional Backdoor Attack
- NeurIPS 2025Temporal Logic-Based Multi-Vehicle Backdoor Attacks against Offline RL Agents in End-to-end Autonomous Driving
- NeurIPS 2025The Good, the Bad and the Ugly: Meta-Analysis of Watermarks, Transferable Attacks and Adversarial Defenses
- NeurIPS 2025ToxicTextCLIP: Text-Based Poisoning and Backdoor Attacks on CLIP Pre-training
- NeurIPS 2025Tracing Back the Malicious Clients in Poisoning Attacks to Federated Learning
- NeurIPS 2025TransferBench: Benchmarking Ensemble-based Black-box Transfer Attacks
- NeurIPS 2025Unmasking Puppeteers: Leveraging Biometric Leakage to Expose Impersonation in AI-Based Videoconferencing
- NeurIPS 2025Who Speaks for the Trigger? Dynamic Expert Routing in Backdoored Mixture-of-Experts Transformers
在 Claude、Cursor 里直接问这个趋势
接上 Paperlist MCP 后，写综述、挑方向或准备投稿时，不用离开对话框就能拿到这页的数字：每年各会议的论文数、增长倍数、涨得最快的子方向和代表论文，AI 会按你的问题整理。
可以直接复制这句话问 AI
用 paperlist 查后门攻击在 NeurIPS 2023–2026 的论文趋势，哪一年涨得最快？
AI 会调用的工具：get_topic_stats {"topic": "backdoor-attacks"}
常见问题
- 2023–2026 年四大会议一共有多少篇后门攻击论文？
- 共 381 篇，按年份分别是 2023 年 73 篇、2024 年 105 篇、2025 年 92 篇、2026 年 111 篇。
- NeurIPS 2026 有多少篇后门攻击论文？
- NeurIPS 2026 有 36 篇后门攻击论文，上一届是 31 篇。
- ICLR 2026 有多少篇后门攻击论文？
- ICLR 2026 有 20 篇后门攻击论文，上一届是 25 篇。
- ICML 2026 有多少篇后门攻击论文？
- ICML 2026 有 36 篇后门攻击论文，上一届是 17 篇。
- CVPR 2026 有多少篇后门攻击论文？
- CVPR 2026 有 19 篇后门攻击论文，上一届是 19 篇。
- 哪个会议的后门攻击论文最多？
- NeurIPS，2023–2026 年共 124 篇。